CVE-2017-16563: CSRF
Published Nov 6, 2017
·Updated
Cross-Site Request Forgery (CSRF) in the Basic Settings screen on Vonage (Grandstream) HT802 devices allows attackers to modify settings, related to cgi-bin/update.
Affected Software
2 affected components
Grandstream Ht802 Firmware
Grandstream HT802
Event History
Nov 6, 2017
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2017-16563.
2
What is the severity of CVE-2017-16563?
The severity of CVE-2017-16563 is high.
3
Which devices are affected by CVE-2017-16563?
Vonage (Grandstream) HT802 devices with the Grandstream Ht802 Firmware are affected by CVE-2017-16563.
4
What is the impact of CVE-2017-16563?
CVE-2017-16563 allows attackers to modify settings on Vonage (Grandstream) HT802 devices.
5
Is there a fix available for CVE-2017-16563?
To fix CVE-2017-16563, it is recommended to update to the latest firmware version provided by Grandstream.